Since you didn't specify the -config option, you are using the default config file with a location of /usr/local/ssl/openssl.cnf. That directory doesn't exist in Windows. A simple solution is to place the following into a .bat file in your openssl\ms directory, and run it from that directory:
set ssleay=c:\openssl-0.9.6b\out32\openssl <-- your dir here set Uconf=openssl.cnf set Ukey=CAkey.pem set Ureq=CACert.pem set reqcmd=%ssleay% req %reqcmd% -new -x509 -config %Uconf% -out %Ureq% -keyout %Ukey% Remember that you're generating a certificate request. The -days param will not be used at this stage. It's when you sign the newly minted request with a CA that will determine length of validity. See the file testss.bat in the openssl\ms directory for further info (which the above code snippet was basically lifted from :-) HTH Rob -----Original Message----- From: Francisco Castillejo [mailto:[EMAIL PROTECTED]] Sent: Tuesday, November 13, 2001 2:21 PM To: [EMAIL PROTECTED] Subject: private key and certificate to the CA I would generate a private key and certificate to the CA (from windows XD) I execute: req -new -x509 -keyout c:\proyecto\b2b-sec\private\CAkey.pem -out c:\proyecto\b2b-sec\CAcert.pem -days 365 and i show in prompt: problems making Certificate Request 4194546673:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\crypto\conf\conf_lib.c:343: I configure a vcvars (Visual C++ enviroment variables) and put in the path the directories: c:\openssl\out32dll and c:\openssl\crypto\conf What is the problem? Thanks ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] ***************************************************************** DISCLAIMER: The information contained in this e-mail may be confidential and is intended solely for the use of the named addressee. Access, copying or re-use of the e-mail or any information contained therein by any other person is not authorized. If you are not the intended recipient please notify us immediately by returning the e-mail to the originator. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
